CSC Business Continuity & Disaster Recovery Planning

Question 1

What is the primary purpose of a Business Impact Analysis (BIA) in a security consulting engagement?

Accepted Answer

To identify and prioritize critical business functions and assess the impact of disruptions

Answer

To document all physical security vulnerabilities in a facility

Answer

To create a budget for emergency response equipment

Answer

To train staff on evacuation procedures

Question 2

The Recovery Time Objective (RTO) is best defined as:

Accepted Answer

The target duration within which a business process must be restored after a disruption

Answer

The maximum tolerable amount of data loss measured in time

Answer

The time required to back up all critical data systems

Answer

The period during which an organization can operate at reduced capacity

Question 3

Which of the following best describes a Recovery Point Objective (RPO)?

Accepted Answer

The maximum acceptable amount of data loss measured in time prior to a disaster

Answer

The specific location designated as the alternate recovery site

Answer

The number of personnel required to restore critical operations

Answer

The time needed to test the disaster recovery plan

Question 4

A security consultant recommending a 'hot site' as an alternate recovery facility is describing:

Accepted Answer

A fully equipped, immediately operational duplicate of the primary site

Answer

A facility with basic infrastructure but no pre-installed equipment

Answer

A mobile command center that can be deployed within 24 hours

Answer

A shared facility leased with other organizations to reduce costs

Question 5

When developing a Business Continuity Plan (BCP), which step should be completed FIRST?

Accepted Answer

Conducting a Business Impact Analysis (BIA)

Answer

Drafting evacuation procedures for all personnel

Answer

Identifying alternate work-from-home policies

Answer

Purchasing backup power generators

Question 6

In the context of disaster recovery, a 'tabletop exercise' is primarily used to:

Accepted Answer

Walk stakeholders through a simulated scenario to evaluate plan effectiveness

Answer

Physically simulate a full system shutdown and recovery

Answer

Test network failover capabilities under live conditions

Answer

Measure the actual RTO of critical systems during a controlled outage

Question 7

Which standard provides internationally recognized guidelines for Business Continuity Management Systems?

Accepted Answer

ISO 22301

Answer

ISO 27001

Answer

NFPA 1600

Answer

ASIS SPC.1